Robert-- wrote:
> Hello. Embarrasingly enough I have to ask this
> question even though it is last weeks news. Regarging
> the issues prompting the JPEG (GDI+)Security tool, can
> anyone tell me if the issues prompting this tool were
> automatically fixable by going to the Windows Update
> Website and updating the computer, or were they only
> manually downloadable fixes? The reason that I ask was
> because last week I was advised by someone in this
> newsgroup to manually download these patches because I
> was told the GDI tool was relatively unreliable.
> I am fairly new to computing any always let WU suggest
> all fixes. I did read the info contained in the Security
> Bulletin for Sept. 2004 (MS04-028) and found what looked
> like some software on my machine; unfortunately, I have
> trouble interpreting "version" numbers for various types
> of software, so I let WU deal with it. Was I wrong?
> I have returned to WU twice since last week and have
> received no new updates since my machine was completely
> up to date. Any advice regarding this would be greatly
> appreciated. Thanks in advance.
In my experience, the detection tool doesn't do much that's useful other
than redirecting you to Windows Update. Also run Office Update to get all
updates.
You can then run
http://isc.sans.org/gdiscan.php to do a scan.